Commit Graph

2970 Commits

Author SHA1 Message Date
Jonhnathan
63adc6fc09
Update win_susp_direct_asep_reg_keys_modification.yml 2020-11-28 12:32:35 -03:00
Jonhnathan
3481b0dd9e
Update win_susp_curl_start_combo.yml 2020-11-28 12:31:55 -03:00
yugoslavskiy
245a0d3438
Update win_susp_outlook.yml 2020-11-28 13:34:57 +01:00
yugoslavskiy
36299f5139
Update win_susp_net_execution.yml 2020-11-28 13:33:30 +01:00
yugoslavskiy
501791945f
Update win_susp_msiexec_web_install.yml 2020-11-28 13:32:01 +01:00
yugoslavskiy
8293fd8e5b
Update win_susp_iss_module_install.yml 2020-11-28 13:30:27 +01:00
yugoslavskiy
1896a45572
Update win_susp_ntdsutil.yml 2020-11-28 13:28:00 +01:00
Jonhnathan
4411fc5b0e
Update win_susp_commands_recon_activity.yml 2020-11-28 09:14:56 -03:00
Jonhnathan
2bf4644b48
Update win_renamed_paexec.yml 2020-11-28 09:08:48 -03:00
Jonhnathan
4e59fc0dfd
Update win_renamed_binary_highly_relevant.yml 2020-11-28 09:08:09 -03:00
yugoslavskiy
4354303174
Update win_susp_execution_path.yml 2020-11-28 13:07:22 +01:00
yugoslavskiy
77cf5d2563
Update win_susp_exec_folder.yml 2020-11-28 13:04:05 +01:00
yugoslavskiy
201377fa29
Update win_susp_csc_folder.yml 2020-11-28 13:01:03 +01:00
yugoslavskiy
c4a35036a0
Update win_susp_csc.yml 2020-11-28 12:54:18 +01:00
yugoslavskiy
5d7f42a4a6
Update win_susp_crackmapexec_execution.yml 2020-11-28 12:53:00 +01:00
yugoslavskiy
38e7853891
Update win_susp_copy_lateral_movement.yml 2020-11-28 12:44:54 +01:00
yugoslavskiy
34e64a6570
Update win_susp_codepage_switch.yml 2020-11-28 12:42:27 +01:00
yugoslavskiy
5278fcd476
Update win_susp_cmd_http_appdata.yml 2020-11-28 12:34:28 +01:00
yugoslavskiy
fd102c1b5f
Update win_susp_certutil_encode.yml 2020-11-28 12:31:40 +01:00
yugoslavskiy
68365f29c2
Update win_susp_certutil_command.yml 2020-11-28 12:29:30 +01:00
yugoslavskiy
c9596d7e30
Update win_susp_adfind.yml 2020-11-28 12:11:53 +01:00
yugoslavskiy
331a177f69
Update win_proc_wrong_parent.yml 2020-11-28 12:10:37 +01:00
yugoslavskiy
dbb054777a
Update win_plugx_susp_exe_locations.yml 2020-11-28 12:02:16 +01:00
yugoslavskiy
0fdd8e7128
Update win_netsh_port_fwd_3389.yml 2020-11-28 11:32:35 +01:00
yugoslavskiy
5d457f4f79
Update win_netsh_port_fwd.yml 2020-11-28 11:31:27 +01:00
yugoslavskiy
78193d3e3a
Update win_mal_adwind.yml 2020-11-28 11:25:28 +01:00
yugoslavskiy
de41e34d53
Update win_apt_sofacy.yml 2020-11-28 11:21:23 +01:00
yugoslavskiy
fe499d8838
Update win_apt_judgement_panda_gtr19.yml 2020-11-28 11:14:23 +01:00
yugoslavskiy
11c18e14d8
Update win_hack_koadic.yml 2020-11-28 11:12:06 +01:00
yugoslavskiy
eaf2fde6eb
Update win_netsh_fw_add_susp_image.yml 2020-11-28 11:05:04 +01:00
yugoslavskiy
5eec5d485b
Update sysmon_in_memory_assembly_execution.yml 2020-11-28 10:55:18 +01:00
yugoslavskiy
9445d18474
Update win_netsh_wifi_credential_harvesting.yml 2020-11-28 10:39:37 +01:00
yugoslavskiy
687f6d8946
Update win_powershell_download.yml 2020-11-28 10:37:30 +01:00
yugoslavskiy
fe0029e738
Update win_powersploit_empire_schtasks.yml 2020-11-28 10:29:07 +01:00
yugoslavskiy
de5cac99d9
Update win_malware_wannacry.yml 2020-11-28 10:28:04 +01:00
yugoslavskiy
5a4b01662e
Update win_netsh_fw_add.yml 2020-11-28 10:22:24 +01:00
yugoslavskiy
9ae26e2674
Update win_apt_cloudhopper.yml 2020-11-28 10:20:12 +01:00
yugoslavskiy
4a2cce0b40
Update win_apt_chafer_mar18.yml 2020-11-28 10:15:39 +01:00
yugoslavskiy
17813c947c
Update win_apt_bluemashroom.yml 2020-11-28 09:48:30 +01:00
yugoslavskiy
26fa500e21
Update win_control_panel_item.yml 2020-11-28 09:38:49 +01:00
yugoslavskiy
2e5e4a20d2
Update powershell_clear_powershell_history.yml 2020-11-28 09:26:18 +01:00
yugoslavskiy
016a89c186
Update win_susp_net_recon_activity.yml 2020-11-28 08:00:07 +01:00
Jonhnathan
702f697168
Update win_powershell_download.yml 2020-11-27 16:10:10 -03:00
Jonhnathan
fb119d6112
Remove additional backslash 2020-11-27 16:06:15 -03:00
Jonhnathan
bf5aa947e3
Update win_office_spawn_exe_from_users_directory.yml 2020-11-27 16:04:55 -03:00
Jonhnathan
f6aaa957ff
Update win_netsh_wifi_credential_harvesting.yml 2020-11-27 16:01:25 -03:00
Jonhnathan
d996e97fdd
Update win_netsh_port_fwd_3389.yml 2020-11-27 16:00:04 -03:00
Jonhnathan
b816754018
Update win_netsh_port_fwd_3389.yml 2020-11-27 15:59:25 -03:00
Jonhnathan
5acd8d622b
Update win_netsh_port_fwd.yml 2020-11-27 15:57:53 -03:00
Jonhnathan
9171d8913c
Remove Additional backslash 2020-11-27 15:45:08 -03:00